Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ab33e68d-bc0b-313d-9e67-493533b2a524.roa
File:                     ab33e68d-bc0b-313d-9e67-493533b2a524.roa (raw, json)
Hash identifier:          r7g7K6kNZp8vSCdKMzyL+ujBRbQd1YSVWHf9qUujQzI=
Subject key identifier:   03:DE:36:A3:D9:70:E3:6B:34:98:C3:E0:3E:88:7C:4F:69:51:D5:C0
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584981D448A58021388E29DB8C00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ab33e68d-bc0b-313d-9e67-493533b2a524.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     395075
IP address blocks:        207.253.182.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:48:a5:80:21:38:8e:29:db:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=4dadb6fe-102f-4a81-ab66-b83b1e0b7ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:45:11:a4:f2:57:69:ce:b4:19:6d:92:93:
                    10:b9:a6:5b:0d:3c:c8:73:e2:35:bc:21:bd:e1:30:
                    af:30:2a:b2:3c:1c:41:b3:93:32:cc:65:d5:a0:e4:
                    d7:cd:97:81:85:95:5a:cd:ce:44:00:fa:cd:17:2a:
                    8e:da:b0:66:21:8f:a5:6c:a6:be:8a:df:7a:6c:79:
                    cc:dd:08:ae:0e:b1:a0:bc:ad:ef:14:6f:79:5a:e0:
                    f6:e4:fa:69:1c:8e:89:03:14:1f:49:2b:be:10:e0:
                    6a:df:2c:4b:fb:5e:0e:87:a3:80:13:e9:ea:28:47:
                    0a:93:e4:23:18:1c:c1:d8:65:1a:c7:95:b8:94:4f:
                    82:01:03:34:2b:b0:3b:a8:38:0c:4d:f6:47:7b:75:
                    f7:32:a9:73:f7:d0:6a:75:5a:49:c3:89:0f:98:f0:
                    a5:bc:b5:cc:68:cf:f5:bd:15:96:31:5c:c3:be:67:
                    db:75:ae:69:7c:42:03:63:69:b8:26:34:7c:16:fc:
                    ec:b8:cd:43:6f:ed:b9:78:2b:b4:43:0b:e1:c7:0e:
                    e7:2d:3b:6f:ff:51:09:98:e7:de:2e:74:03:c1:da:
                    4d:b2:7a:a5:e9:ca:b8:f4:38:01:b6:a9:81:4c:ba:
                    15:62:32:f9:e3:3f:a5:7d:fc:ef:06:44:1c:ef:bd:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:36:A3:D9:70:E3:6B:34:98:C3:E0:3E:88:7C:4F:69:51:D5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ab33e68d-bc0b-313d-9e67-493533b2a524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:5c:04:98:8b:90:76:75:5f:05:ec:7e:fb:2c:44:bc:ad:
         ba:bb:6e:45:a7:22:c4:57:35:c5:b0:ff:be:59:3f:c2:66:04:
         99:ad:54:b1:bb:56:ec:6b:5b:cd:86:fb:53:cd:b6:4d:21:7d:
         31:22:77:62:5b:4e:2b:fa:da:0d:76:02:a7:76:bc:52:74:96:
         fc:4a:ee:2f:29:fe:e3:23:d1:1e:47:6c:71:cd:21:54:40:fc:
         4d:1c:7d:8e:1f:64:d0:7d:c0:33:53:1c:82:e9:d5:93:88:d3:
         a0:99:af:fb:ed:a5:e5:c9:7d:3b:a3:46:5d:e3:c5:88:77:15:
         07:69:a2:d7:ed:aa:12:11:ee:7a:be:1c:be:ab:d9:22:20:d0:
         08:11:23:3a:39:fc:b4:19:70:cb:ab:b8:ac:86:b7:3c:18:ee:
         53:dd:fd:e7:f0:0c:1e:f7:7d:0d:4a:a0:85:1a:2d:ac:ed:54:
         b2:4c:de:a2:a6:a8:4e:cf:e5:81:71:84:ca:00:c7:1f:d1:2f:
         fe:62:53:72:fc:3d:cd:a5:f1:84:db:b4:11:5d:7b:8b:b1:f1:
         26:27:3f:54:61:5f:21:a4:4b:57:76:00:58:e0:f0:a9:4a:a4:
         22:c4:b3:c4:f6:aa:67:28:e1:84:d5:4c:54:66:d5:7e:d9:1b:
         62:e8:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----